Goofdru
asked on
Cisco PIX VPN not very quick
Hi!
I have configured a vpn between my 3 offices FL, TN, and KY using Cisco PIX routers 501 in FL and 506e's in KY and TN. KY being the corperate we have a T1 and a half, FL has DSL, and TN just got a T1. FL has had the VPN in place for over a year now, and the slow response, I thought, was due to the DSL. However, now that TN has gotten a T1 we set up the VPN and then a trust between the two domains (Long story but TN is in a different domain than KY and FL, buy out) both being 2003 windows domains.
The performance from TN is just a little faster than the FL office. I was hoping to run applications and what not but with it being this slow I don't know what to do.
Basically, what are some troubleshooting steps or tests that I can run to see where the bottle neck is?
Thanks
I have configured a vpn between my 3 offices FL, TN, and KY using Cisco PIX routers 501 in FL and 506e's in KY and TN. KY being the corperate we have a T1 and a half, FL has DSL, and TN just got a T1. FL has had the VPN in place for over a year now, and the slow response, I thought, was due to the DSL. However, now that TN has gotten a T1 we set up the VPN and then a trust between the two domains (Long story but TN is in a different domain than KY and FL, buy out) both being 2003 windows domains.
The performance from TN is just a little faster than the FL office. I was hoping to run applications and what not but with it being this slow I don't know what to do.
Basically, what are some troubleshooting steps or tests that I can run to see where the bottle neck is?
Thanks
How many people do you have at each office? What is the utilization on the circuits? Do you have any services open to the outside world? The 501 is designed for small offices and the 506 for branch offices.
ASKER
KY office - 35 to 40 people with a 40% - 60% utilization of the bandwidth (I think that is what you were asking).
TN office - 10 - 15 people - don't really have a utilization on that office.
FL office - 3 - 6 people - DSL
I am aware that the 501 is designed for small offices, the FL office probably won't get any bigger and if it does we will move buildings and get a new one then.
I just had always thought that since FL is on DSL then it was the bandwidth issue, but now that TN has a T1 and we set it up, it should be better than this.
TN office - 10 - 15 people - don't really have a utilization on that office.
FL office - 3 - 6 people - DSL
I am aware that the 501 is designed for small offices, the FL office probably won't get any bigger and if it does we will move buildings and get a new one then.
I just had always thought that since FL is on DSL then it was the bandwidth issue, but now that TN has a T1 and we set it up, it should be better than this.
ASKER CERTIFIED SOLUTION
membership
Create a free account to see this answer
Signing up is free and takes 30 seconds. No credit card required.
ASKER
Well, I haven't used anything from the link there but will once everyone leaves.
I have however watched the GUI interface of the PIX for the last 30 minutes or so and here by looking at it I am not sure what to think.
The processor never went above 1% even when the INPUT Kbps was at 1536, full T1.
The memory was consistanly at 16 MB of its installed 32 MB
The INPUT Kbps stayed at 1536 for about 5minutes then shot down to about 256 in a 10 second span and stayed there for about 5 minutes then went back up to 1536. Replication maybe?
Other tests will follow.
I have however watched the GUI interface of the PIX for the last 30 minutes or so and here by looking at it I am not sure what to think.
The processor never went above 1% even when the INPUT Kbps was at 1536, full T1.
The memory was consistanly at 16 MB of its installed 32 MB
The INPUT Kbps stayed at 1536 for about 5minutes then shot down to about 256 in a 10 second span and stayed there for about 5 minutes then went back up to 1536. Replication maybe?
Other tests will follow.